Operator Checklist

Operator Checklist

Things that cannot be done from an agent session alone.

Backend

• Apply migration 0096 to artistant-dev, smoke, then artistant-prod
  supabase link --project-ref <ref> → supabase db push
• Confirm 0061 stays marked applied / skipped forever on prod (never run after 0071)
• Redeploy send-push + delete-account if #113 changes aren't live
• Schedule / verify pg_cron: compute-score-nightly, social-sync-nightly, cron-show-reminder, any 0090 sweeps
• Rotate any secrets that appeared in chat transcripts (IG app secret Jul 31, PAT Jul 22, …)

Edge Function secrets (both projects)

Secret	Used by
COMPUTE_SHARED_SECRET / PUSH_SHARED_SECRET	score + push triggers
APNs P8 + key id + team	send-push
INSTAGRAM_APP_ID / INSTAGRAM_APP_SECRET	IG OAuth
SOCIAL_STATE_SECRET	OAuth state HMAC
YOUTUBE_OAUTH_CLIENT_ID / SECRET + YOUTUBE_API_KEY	YT connect + sync
Spotify credentials	social-sync-spotify
RAZORPAY_WEBHOOK_SECRET	dormant until payments

Also set app_settings.edge_function_base_url (documented enable switch — dev first).

iOS / App Store

• Paste Sentry DSN + PostHog key into Configs/*.local.xcconfig
• App Store Connect: IAP products + ASSN URL → then flip subscriptionsEnabled
• Verify Apple Sign-In against artistant-prod on a Release/TestFlight build
• Meta App Review for Instagram (non-tester artists)
• Google OAuth verification for YouTube (non-test-user artists)
• Register callback URIs on Google Cloud + Spotify dashboards (see HANDOFF §16)
• Real-device push: register token → receive message/gig_request notification

Device install

• Developer Mode on
• Device registered to team 3VN4X827YF
• Delete older Artistant installs signed by a different team before reinstalling

Notion (user-facing docs)

Home: https://app.notion.com/p/38a90c7ef47d81b0b8c6e32ea91ba9e8

IAP checklists, payments audit, screen gap map, etc. live as Notion sub-pages — not new HTML in the repo.